California Privacy Notice (CCPA)
Introduction and Scope
This California Privacy Notice supplements the Capitalsignallab Privacy Policy and applies solely to visitors, users, and others who reside in the State of California ("California consumers" or "you"). We provide this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (collectively, the "CCPA"). Terms defined in the CCPA have the same meaning when used in this notice.
Categories of Personal Information Collected
In the past twelve (12) months Capitalsignallab may have collected the following categories of personal information from or about California consumers: identifiers (such as IP address and email address when you subscribe); internet or network activity (browsing history on the site, referring URL, time of request); geolocation data at the coarse-grained, city-level resolution derived from IP; commercial information (which newsletters you have subscribed to); inferences drawn from this information (such as aggregated content preferences); and audio or visual information only if you voluntarily submit it (for example, a photo attached to a tip you send through our Contact form).
Sources of Personal Information
Capitalsignallab gathers personal information from three sources only: directly from you (forms you complete on the site); automatically through your device interactions (page requests and cookie state); and indirectly from the service providers we use to operate the website (each of which we contract with under a data-protection agreement). We do not buy or rent personal information from outside parties.
Business and Commercial Purposes
The personal information described in this notice is used by Capitalsignallab to operate, secure, and improve the service; to provide the editorial newsletter to subscribers; to answer messages submitted via our forms; to detect and prevent abuse; to produce aggregate audience reports; and to satisfy our legal obligations. We do not use personal information for any purpose materially different from those for which it was originally collected without notifying you.
Disclosure to Service Providers and Third Parties
Categories of third parties to which Capitalsignallab discloses personal information (always under a service-provider or processor agreement) are: hosting, edge/CDN security, email service providers, web-analytics providers, and advertising networks. Each is contractually limited to the specific business purposes for which the information is disclosed and is prohibited from retaining, using, or disclosing the information beyond those purposes.
Sale and Sharing of Personal Information
Capitalsignallab does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.
Sensitive Personal Information
Under the CCPA, certain categories of personal information are designated as "sensitive" — including precise geolocation, government IDs, financial account numbers, racial or ethnic origin, religious beliefs, and similar attributes. Capitalsignallab does not knowingly collect or process such categories for inferring characteristics about California consumers. Any voluntary submission of sensitive information through our forms is used solely for the workflow you initiated.
Your California Privacy Rights
Under the CCPA, California consumers have the following rights: (1) the right to know what personal information we have collected about you, including the categories of information, the sources, the purposes, and the categories of third parties to which we disclose it; (2) the right to access the specific pieces of personal information we hold; (3) the right to correct inaccurate personal information; (4) the right to request deletion of personal information; (5) the right to opt out of any sale or sharing of personal information (we do not sell or share, but the right exists); (6) the right to limit the use of sensitive personal information; and (7) the right to non-discrimination for exercising any of these rights.
How to Exercise Your Rights
To exercise any of the rights described above, please submit a request through the Contact form linked in the site footer, or by email to the contact address listed on our Contact page. We will need to verify your identity to a degree of certainty proportional to the request — for newsletter records, confirming the email subscribed is usually sufficient; for broader access or deletion requests we may ask for additional information. We will respond within 45 days, or notify you if more time is needed (up to a further 45 days).
You may also designate an authorized agent to submit a request on your behalf. We will require the agent to provide written permission from you (or a power of attorney) and may verify your identity directly to confirm the request. Agents acting on behalf of multiple consumers under a single permission must still meet the verification standards required by the CCPA for each consumer represented.
Consumers Under 16 Years of Age
Capitalsignallab does not sell or share personal information about consumers under the age of 16 and does not have actual knowledge of collecting personal information of children under 13. If we ever decided to sell or share personal information about consumers between the ages of 13 and 16, we would do so only with the affirmative authorization of the consumer (opt-in) as required by the CCPA. Parents and guardians may submit deletion requests on behalf of their children via the Contact form.
Right to Non-Discrimination
We are committed to the CCPA's anti-retaliation principle: Capitalsignallab will treat California consumers equally regardless of whether they exercise their CCPA rights. There is no premium or paid tier where rights-exercising consumers receive a lesser experience — the editorial content is the same for everyone. We do not offer financial incentives in exchange for collecting personal information.
Retention of Personal Information
We retain each category of personal information only for as long as needed to fulfill the purpose for which it was collected, plus any retention required by applicable law. Specifically: newsletter subscribers' email addresses are retained until you unsubscribe (and then moved to a minimal suppression list); contact-form messages are retained for up to 24 months; server access logs are retained for up to 90 days; aggregated analytics data is retained indefinitely in non-identifying form.
Changes to This Notice and How to Reach Us
This California Privacy Notice may be updated periodically. The version on this page is always the current version, and the "Last updated" date shows when it took effect. To exercise any CCPA right or to ask a question about this notice, contact Capitalsignallab through the Contact form linked in the footer of every page — that form routes directly to the editor responsible for privacy correspondence.